CVE-2026-105877: WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability

Q: Which installations are affected?

QA Analytics versions through 5.3.0.0 are affected. The available information does not identify a fixed version or any configuration requirements.

Q: What could an attacker obtain?

The issue can expose sensitive information embedded in data sent by the plugin, allowing retrieval of embedded sensitive data. The provided information does not specify the data types involved or the access level required to retrieve them.

Published Oct 9, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0.

Affected Software

1 affected component

Quarka QA Analytics<=5.3.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress QA Analytics plugin to a version that resolves this vulnerability.
Fixed in 5.3.0.1

Event History

Oct 9, 2026

CVE Published

via MITRE·12:08 PM

Data Sourced

via MITRE·12:08 PM

RemedyDescriptionWeakness

Frequently Asked Questions

Which installations are affected?

QA Analytics versions through 5.3.0.0 are affected. The available information does not identify a fixed version or any configuration requirements.

What could an attacker obtain?

The issue can expose sensitive information embedded in data sent by the plugin, allowing retrieval of embedded sensitive data. The provided information does not specify the data types involved or the access level required to retrieve them.

CVE-2026-105877: WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What could an attacker obtain?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What could an attacker obtain?